Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GFVEc2upKx2Vr3k1ze9QNjlR42s.roa
File: GFVEc2upKx2Vr3k1ze9QNjlR42s.roa (raw, json)
Hash identifier: F72Ajd+1LotLvmZz/B3OFVrAOH7Rkk69UXuBWbcimuY=
Subject key identifier: 18:55:44:73:6B:A9:2B:1D:95:AF:79:35:CD:EF:50:36:39:51:E3:6B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7AAB75871ACC26A4C3A4029D9CF65930
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GFVEc2upKx2Vr3k1ze9QNjlR42s.roa
Signing time: Mon 18 Dec 2023 02:05:06 +0000
ROA not before: Mon 18 Dec 2023 02:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:7aaa:be31/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7a:ab:75:87:1a:cc:26:a4:c3:a4:02:9d:9c:f6:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 02:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185544736ba92b1d95af7935cdef50363951e36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8d:50:31:7f:42:67:e2:04:eb:9f:e5:6e:8f:
1c:76:29:41:d2:f8:39:9b:5a:87:fa:ad:84:14:ce:
15:e3:ae:26:6f:9f:35:35:f6:59:17:8a:4c:bb:a4:
8d:d0:49:cd:86:45:19:be:14:37:a4:f6:d9:51:59:
26:d1:e1:85:18:b5:ba:f9:a0:6d:9c:e8:d7:4f:f5:
6a:b4:fd:99:be:74:ea:0d:2b:71:b4:aa:48:db:33:
11:d5:7d:d4:a8:9d:aa:fd:e4:9a:3a:b5:72:0e:45:
6e:86:39:f7:70:6a:33:73:c9:2d:13:25:22:85:85:
c9:ad:5d:4e:43:91:8b:69:37:42:57:b6:e0:9c:5d:
d1:71:c2:0c:6f:c9:77:8d:00:25:a4:18:79:79:98:
6d:10:19:cb:af:0d:c2:eb:98:56:77:7c:d6:af:66:
36:34:7a:66:49:58:88:fe:88:04:e0:31:53:a4:2b:
a9:a6:94:c8:69:4f:af:8e:50:36:03:c9:9a:12:69:
24:db:35:3d:d7:06:6b:d6:91:e0:da:dd:0e:91:7b:
1b:ed:ef:ca:6d:d1:10:f4:a4:a4:b9:47:7e:a3:66:
e3:dc:ea:4a:b4:85:a8:06:df:1e:db:37:44:6a:9b:
3f:4c:b9:52:27:71:f1:90:42:7d:11:cf:b1:7a:c0:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:44:73:6B:A9:2B:1D:95:AF:79:35:CD:EF:50:36:39:51:E3:6B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GFVEc2upKx2Vr3k1ze9QNjlR42s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:31:84:0f:7e:ee:34:a0:98:a2:0f:c4:ef:9b:a8:a5:17:a6:
10:ec:73:c1:51:88:62:9c:5d:57:2b:4c:cb:f4:b2:7a:e6:99:
0d:12:c1:dd:7f:9e:49:1a:85:90:d4:51:e0:aa:14:5e:6e:75:
96:96:63:29:8b:61:70:47:ed:dc:04:95:80:23:6f:94:1e:e9:
f1:15:35:47:be:0f:b4:14:2e:6c:7c:d2:13:94:02:29:ab:d0:
19:31:83:cb:f7:1f:ab:14:30:0a:24:2c:0d:d8:b9:bc:ec:74:
3b:74:c3:aa:ac:9e:28:c9:41:43:38:76:70:42:e3:c6:d1:91:
23:b3:f1:ab:39:8d:45:b1:4b:66:08:12:dc:e8:5f:ac:31:0c:
e6:a4:6c:df:06:8f:27:82:99:b6:2b:64:a9:b2:7a:45:ed:91:
91:4c:c7:65:df:5a:9e:ad:36:fd:ab:48:c5:42:bb:dc:a5:76:
e2:55:52:13:96:23:20:0b:ed:07:44:2b:15:2b:1c:78:a3:30:
b3:65:fd:41:8d:1c:20:2a:af:04:ad:d2:14:49:76:7e:f1:1a:
f2:92:4e:1d:b6:14:03:2f:97:3c:90:c8:82:a3:da:7e:2e:a6:
76:b4:4c:8d:77:7a:b9:2f:08:ba:91:4f:1e:69:15:22:51:a1:
84:42:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:31:12 2025 by rpki-client